
Error: rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
File: D95F78E630398477E9BAE976B3EAEDB0059994DB.mft (raw, json)
Hash identifier: FBa0qtdw/RiGxBxitdoY8xT3kdzhsUf3VkidYJdUbVY=
Subject key identifier: 0F:32:49:A1:98:62:BA:65:31:83:19:33:49:22:0C:7B:63:7F:EC:31
Authority key identifier: D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
Certificate issuer: /CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
Certificate serial: 2BB851C7A653119423334CB910C1AAB58E4DA3F3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
Manifest number: 04D0
Signing time: Fri 16 Oct 2026 20:41:09 +0000
Manifest this update: Fri 16 Oct 2026 20:36:09 +0000
Manifest next update: Sun 18 Oct 2026 00:23:09 +0000
Files and hashes: 1: 323830343a363762633a3a2f33322d3332203d3e20323639363437.roa (hash: fvE9pXgMUp8SZiwt8yaIdBGzsVv1q58Rcf6C14Lu/5o=)
2: 323830343a363762633a343030303a3a2f33342d3334203d3e20323639363437.roa (hash: 10grmYgRlb0SS90IyJSUVWSNmVEKOcdAfRyd6LTqChc=)
3: 323830343a363762633a383030303a3a2f33332d3333203d3e20323639363437.roa (hash: FLXGaKLJIXT/ztk+GQ6KZbmG3HuPwYPyDxg5J/txsdc=)
4: 323830343a363762633a3a2f33342d3334203d3e20323639363437.roa (hash: pBXGSP6xBS4tQHTcAxyiO8BZnw2+dfsHagzia0t4r8Q=)
5: 323830343a363762633a3a2f33332d3333203d3e20323639363437.roa (hash: smxTkQ5o90PQIFi81VarJKZNQHmklJJsnDJFMVfj0wE=)
6: 323830343a363762633a383030303a3a2f33342d3334203d3e20323639363437.roa (hash: DuW5wKAhp6//rvLyFaiDLnhGVFbnp+HRsMbcYUl+N/0=)
7: 34352e3139302e3133382e302f32342d3234203d3e20323639363437.roa (hash: 8h0SoQa+zHvg8ypoewsh82jRvTmx1mn+k+sbaBCNSRE=)
8: 34352e3139302e3133362e302f32322d3232203d3e20323639363437.roa (hash: LlOYaEoeqHrYA4xy9Bq+IRx20dAH+42ivQxYifmQVg0=)
9: D95F78E630398477E9BAE976B3EAEDB0059994DB.crl (hash: D//9ZUQAWga3OzDWJ6MkY4S/CUEbr83isbZwMddKXKY=)
10: 34352e3139302e3133372e302f32342d3234203d3e20323639363437.roa (hash: XIHUqLSBSkh+uND0iH7PeZcXzivXfes80WQfvk2csrw=)
11: 323830343a363762633a3a2f33322d3438203d3e20323630363437.roa (hash: HbK+I93CH0OZ8rMeXWbavpKRDyz849KcbyrzE/f1W8c=)
12: 34352e3139302e3133362e302f32322d3234203d3e20323639363437.roa (hash: 3Y2YOrZBZpyxSvI1zOvxfut2UD/6PFOwe1gjuKLm17s=)
13: 323830343a363762633a633030303a3a2f33342d3334203d3e20323639363437.roa (hash: e7p2Z+92+MzlvClpqyoaCVFz9q8M+GOdOURvPxj59zU=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl
rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Oct 2026 00:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:b8:51:c7:a6:53:11:94:23:33:4c:b9:10:c1:aa:b5:8e:4d:a3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
Validity
Not Before: Oct 16 20:36:09 2026 GMT
Not After : Oct 18 00:23:09 2026 GMT
Subject: CN=0F3249A19862BA653183193349220C7B637FEC31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3c:8d:0a:5e:ab:28:e7:89:d8:01:49:a7:37:
67:aa:47:fc:a5:9e:a3:d8:df:00:55:8e:e7:ae:95:
00:45:e5:19:ba:f5:13:aa:5f:20:1a:a0:59:0c:b9:
a4:18:9f:a0:42:92:d7:3a:70:25:88:ac:f9:27:37:
89:64:cd:3e:94:6e:15:f4:e4:28:42:5b:f8:2b:ff:
c9:4a:a9:a2:d4:14:54:fa:15:cd:38:46:77:99:e1:
30:e1:49:a8:f1:d8:2f:b6:16:31:ec:9a:92:36:c4:
65:ae:5e:03:71:4f:0f:cf:0b:cd:2b:08:de:b3:2b:
08:59:8a:a6:70:30:48:c7:1f:00:2e:c9:cf:df:36:
e1:78:d7:3c:f9:ce:49:fb:72:e1:44:22:3a:20:20:
c4:c6:3a:82:55:ee:27:a1:76:98:29:19:fb:96:c4:
7e:e6:30:f7:6d:09:ba:39:7b:93:68:01:b7:1e:74:
a7:ea:35:ee:b6:b2:91:d1:da:e9:98:a9:ff:c4:2f:
81:5d:e8:d4:d2:63:d0:c3:bf:03:e7:68:0e:da:7a:
35:37:1e:fb:a2:84:93:10:25:00:03:fb:73:60:6a:
5d:4a:8a:80:3e:77:d2:6c:91:2e:54:80:82:02:10:
be:07:65:c2:24:4f:a7:31:12:c6:c8:08:e8:bb:1f:
9c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:32:49:A1:98:62:BA:65:31:83:19:33:49:22:0C:7B:63:7F:EC:31
X509v3 Authority Key Identifier:
keyid:D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:52:64:ed:ad:a9:ee:76:90:9e:e0:fa:d0:ea:76:30:d9:58:
54:8d:1f:c1:f0:88:17:16:b5:80:17:41:29:7f:22:bd:4f:a3:
71:2a:f5:75:e1:31:b6:ab:82:25:a9:a1:61:9d:60:75:18:80:
26:97:75:c3:c5:0a:bd:80:3c:52:e9:5c:ca:18:59:7c:75:e3:
55:28:92:3e:73:42:7a:16:74:d1:69:92:bf:d4:83:55:f8:0e:
58:d2:4d:d7:ab:b1:b1:0c:8d:3a:5a:b6:70:e9:ae:fe:fc:94:
b4:67:1e:bb:a3:33:e8:c7:ac:92:7f:50:fc:34:23:64:67:33:
f2:d3:29:6c:f2:d8:5d:88:b8:fb:dc:dc:05:90:8c:45:67:fb:
03:b6:a9:a8:74:eb:3c:7e:44:a4:c6:d8:65:82:0e:bb:1f:f8:
2b:da:7d:c6:18:79:14:e1:09:86:db:c1:bd:fd:75:bc:2d:b3:
85:b0:55:c1:04:27:83:01:bf:57:ba:db:f9:d2:6e:1e:9d:11:
13:23:2c:88:1d:12:c7:00:35:90:48:cd:f0:4c:18:ef:1d:ce:
5a:12:cb:4b:41:0c:9a:94:d5:67:c6:7b:c8:f5:a0:2e:ba:c6:
29:eb:bc:24:d9:e5:3a:44:98:88:6a:f9:8f:16:cd:16:a2:40:
0e:c0:61:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 09:06:37 2026 by rpki-client